Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32302e302f32342d3234203d3e20323639363634.roa
File:                     34352e3139312e32302e302f32342d3234203d3e20323639363634.roa (raw, json)
Hash identifier:          vzHkA82FjubThx4FYxF7UsvcMqJPHwRadT1irybk+o8=
Subject key identifier:   ED:44:38:64:42:E6:CE:45:B7:73:2E:C4:64:BF:97:BA:B0:B8:C1:CA
Certificate issuer:       /CN=8CF0B434A59C0598B055FF40F880494E46C052FD
Certificate serial:       0C9952061F2F9ABB8968931C07099071C227F1BF
Authority key identifier: 8C:F0:B4:34:A5:9C:05:98:B0:55:FF:40:F8:80:49:4E:46:C0:52:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CF0B434A59C0598B055FF40F880494E46C052FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32302e302f32342d3234203d3e20323639363634.roa
Signing time:             Mon 26 Sep 2022 17:38:48 +0000
ROA not before:           Mon 26 Sep 2022 17:33:48 +0000
ROA not after:            Mon 25 Sep 2023 17:38:48 +0000
asID:                     269664
IP address blocks:        45.191.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:99:52:06:1f:2f:9a:bb:89:68:93:1c:07:09:90:71:c2:27:f1:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CF0B434A59C0598B055FF40F880494E46C052FD
        Validity
            Not Before: Sep 26 17:33:48 2022 GMT
            Not After : Sep 25 17:38:48 2023 GMT
        Subject: CN=ED44386442E6CE45B7732EC464BF97BAB0B8C1CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f2:d5:fa:2e:c6:3b:77:08:d6:fc:e7:d0:a9:
                    da:cd:40:31:30:59:1f:40:9a:70:65:9e:5c:6c:74:
                    be:d9:52:29:f5:b1:15:d1:ff:b3:b1:22:69:79:fb:
                    88:1d:06:6d:43:68:c8:5f:09:11:ac:b7:f6:f7:11:
                    85:92:26:66:6d:80:91:a5:f9:f7:f0:8c:53:7b:77:
                    f3:02:35:a6:ab:c9:01:52:97:62:16:f9:89:b9:ef:
                    ce:7a:8f:14:2e:1b:48:ba:c4:f6:1c:f0:c1:06:3c:
                    bd:a5:fa:20:d3:65:23:a3:e1:4a:48:ff:5a:3e:67:
                    19:55:a3:24:21:5a:f8:d7:f5:d5:a1:4c:36:ed:c1:
                    dd:ec:11:b7:cd:4e:ce:02:22:77:1f:7c:59:50:ab:
                    db:28:e1:f7:04:90:7a:c9:50:66:9f:e5:c5:99:eb:
                    c8:77:b4:36:be:c4:c4:58:9e:00:2b:e2:75:77:74:
                    ec:eb:4a:98:5c:6b:07:ee:16:7c:9d:66:49:a5:dd:
                    fe:1f:31:be:e7:b3:ff:6c:ca:09:8a:bc:f9:9b:0c:
                    39:6e:83:a1:4b:df:00:fb:d4:35:de:f0:6c:4c:44:
                    c4:d6:3f:3f:ec:cc:e9:a1:70:49:31:77:e2:83:c0:
                    22:ef:6e:65:b3:ac:fa:fb:19:e3:15:7b:de:1d:9e:
                    94:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:44:38:64:42:E6:CE:45:B7:73:2E:C4:64:BF:97:BA:B0:B8:C1:CA
            X509v3 Authority Key Identifier:
                keyid:8C:F0:B4:34:A5:9C:05:98:B0:55:FF:40:F8:80:49:4E:46:C0:52:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/8CF0B434A59C0598B055FF40F880494E46C052FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CF0B434A59C0598B055FF40F880494E46C052FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32302e302f32342d3234203d3e20323639363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:fd:9a:57:ff:1f:f6:47:37:79:83:86:36:9d:66:e7:8c:c5:
         e6:e4:a1:61:70:ad:b7:c0:e7:9c:39:a1:c3:f8:c4:ac:49:e4:
         46:ce:19:e7:97:ae:ab:ba:78:d9:9a:f2:88:98:16:c6:52:f5:
         a0:3f:50:8a:ed:64:a2:b0:96:09:86:8a:49:d4:44:00:98:84:
         4d:77:eb:4f:d3:6d:b5:0a:b8:db:5d:a9:f7:06:99:79:82:c3:
         c1:f3:56:59:43:bd:c3:78:c9:aa:05:b2:46:f1:cd:9d:55:ad:
         ec:e4:cd:a6:37:21:c9:32:20:b9:8f:bf:1b:50:55:9f:e5:da:
         b5:cc:78:1d:85:9b:10:f1:a4:f0:84:e4:09:a0:39:aa:a2:53:
         7b:43:94:44:ab:60:95:c3:78:b4:36:e0:a9:22:4e:6a:2a:22:
         b5:39:63:07:41:08:58:0e:84:74:51:03:29:b2:4e:59:06:23:
         e8:be:92:e9:c1:10:8b:c1:48:1a:5c:6a:e8:cc:5b:59:a1:12:
         d0:01:55:d5:68:8e:42:6e:06:e6:2a:32:32:3e:1c:f3:be:66:
         32:3c:ed:70:a2:60:5b:e5:9a:7e:7a:89:24:c6:4a:c7:68:5e:
         88:7f:ff:dc:1e:1a:a8:99:61:ff:0e:5d:b0:79:30:43:50:7e:
         a7:b4:bd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:33 2023 by rpki-client on console-fra.rpki-client.org